Safety of Perception System for Automated Driving: A Case Study on Apollo

This replication package consists of the detailed results of the safety assessment process of Apollo 7.0’s perception system for its use on a 3.4-kilometer segment of the Dutch highway, A270.<br> <br> <strong>‘Operational design domain description’</strong> consists of a detailed description of the operational area (operational design domain). <strong>‘Hazard Analysis and Risk Assessment’ </strong>is a Microsoft Excel workbook of 6 sheets comprising of all intermediate results from the first two steps of safety requirement elicitation (hazard analysis, risk assessment), along with the final result (safety goals and their risk levels). <strong>‘Safety Analysis’</strong> is a pdf document showing the translation of system-wide safety goals to the safety goals specific to components using fault tree analysis. <strong>‘Safety Requirements’ </strong>is a Microsoft Excel workbook of 2 sheets comprising the final result of the safety requirement elicitation process, i.e., safety requirements (1) for traditional software (2) specific to ML-based systems. <strong>‘Design assessment’ </strong>is a Microsoft Excel workbook of 2 sheets comprising the design assessment results. Specifically, the sheets consist of (1) the safety requirements and applicable design choices for each requirement; (2) where did we assess each requirement; (3) the final verdict for assessment of each requirement; (4) the reason for the verdict and the design decisions found in Apollo’s perception system related artifacts.本复现包包含阿波罗（Apollo）7.0感知系统在荷兰A270号高速公路3.4公里路段应用场景下安全评估流程的全部详细结果。 「运行设计域描述」包含该运行区域（运行设计域，Operational Design Domain）的详细说明。 「危害分析与风险评估」为包含6个工作表的Microsoft Excel工作簿，收录了安全需求征集前两个阶段（危害分析、风险评估）的全部中间结果，以及最终成果——安全目标及其对应风险等级。 「安全分析」为一份PDF文档，展示了通过故障树分析将全系统安全目标转化为针对各组件的专属安全目标的完整过程。 「安全需求」为包含2个工作表的Microsoft Excel工作簿，收录了安全需求征集流程的最终成果，即两类安全需求：（1）适用于传统软件的安全需求；（2）针对基于机器学习（Machine Learning，ML）的系统的安全需求。 「设计评估」为包含2个工作表的Microsoft Excel工作簿，收录了设计评估的相关结果。具体而言，各工作表分别涵盖以下内容：（1）每项安全需求及其适用的设计选型；（2）各项需求的评估实施场景；（3）各项需求评估的最终结论；（4）得出该结论的依据，以及阿波罗感知系统相关工件中涉及的设计决策。